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1. An original data circulation system for 
storing or circulating original data which is 
digital information! said system comprising: 

an apparatus including: means for 
generating first information corresponding to an 
issuer apparatus fori issuing data; means for sending 
said first information; and means for sending second 
information corresponding to said data; and 



an apparati 
verifying validity of 
is received; means fo 
apparatus correspond! 



20 



s including: means for 

said first information which 
r verifying that an issuing 
g to valid first information 
is valid; and means fbr determining that data 
corresponding to saidl second information is valid 
when said issuer apparatus is valid. 



25 2. An original data circulation method in 

an original data circulation system for storing or 
circulating original data which is digital 
information, said method comprising the steps of: 

generating finrst information corresponding 
30 to an issuer apparatus for issuing data; 

sending said first information; 
sending second\ information corresponding 
to said data; 

verifying validity of said first 
35 information which is received; 

verifying that an issuing apparatus 
corresponding to valid first information is valid; 



and 

determining that data corresponding to 
said second information is valid when said issuer 
apparatus is v\alid. 



3, A Idata storing method of storing 
digital information which has a value, comprising 
the steps of : 

generating first information which is 
digital information with a signature signed by an 
issuer apparatus of said digital information; 

generating, by said issuer apparatus, 
second information, said second information being a 
manifest corresponding to said digital information; 

ing, by a user apparatus, identity 
pparatus by using said first 
information and] said second information; and 

preventing reproduction of said digital 
information . 



verif I 
of said issuer 



Th|s data storing method as claimed in 
claim 3, comprising the steps of: 

obtaining a verification key issued by a 
server which is stringently managed concerning 
issuance of digital information; 

generating, by said user apparatus, 
session information from said verification key; and 

verifying validity of said session 
information . 
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5. The d&ta storing method as claimed in 
claim 3, comprising the steps of: 

verifying the identity of said issuer 



apparatus by storink 
tamper -proof device \ 
preventing 
information . 



said second information in a 
and 

reproduction of said digital 



: a 
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6. A data [storing system for storing 
15 digital information (which has a value, comprising: 

an issuer apparatus for generating first 
information which isl digital information with a 
signature and generating second information which is 
a manifest corresponding to said digital 
20 information; and 

a user apparatus for verifying the 
identity of said issuer apparatus by using said 
first information and! said second information; and 
preventing reproduction of said digital 
25 information. 



30 7. The data Istoring system as claimed in 

claim 6, said user apparatus further comprising 
means for obtaining a verification key issued by a 
server which is stringently managed concerning issue 
of digital information; 

35 said data storting system further 

comprising a collector apparatus including: 

means for generating session information 
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session info 



f icat; 



ion key; and 
ans for verifying the validity of said 
mation . 
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8. }The data storing system as claimed in 
claim 6, saidj user apparatus further comprising: 

means for verifying the identity of said 
issuer apparatus by storing said second information 
in a tamper-piroof device; and 

presenting reproduction of said digital 
information . 
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9. A user apparatus for using digital 
information in a data storing system for storing 
digital information which has a value, comprising; 

firsli storing means for storing and 
extracting digital information with a signature; 

seconld storing means for storing and 
extracting a mapifest corresponding to digital 
information ; 

first 1 authentication means for verifying 
that said manifest is valid; and 

first Icontrol means for storing said 
manifest in said! second storing means only when said 
first authentication means verifies that said 
manifest is vali< 



10, The 



user apparatus as claimed in claim 
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9, said second st 
authentication me 
capability . 
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Dring means and said first 
ans having a tamper-proof 



11. The user apparatus as claimed in claim 
9, said first authentication means including: 

means for determining whether said digital 
information stored! in said first storing means is 
valid by verifying! "that said manifest corresponding 

is stored in said second storing 



to said informatio 
means ; and 

means fo 



determining that said digital 



information is valid only when said manifest is 



stored in said sec\ 
that said digital 



>nd storing means and determining 
information is invalid when said 



manifest is not stored in said second storing means 



12. The ikser apparatus as claimed in claim 
25 9, further comprising: 

signature means for providing a signature 
to digital information; 

second authentication means for verifying 
that the signer of said manifest is included in 
30 accredited objects and for verifying that the signer 
of accredited information and the signer of said 
digital information! are the same; and second control 
means , 

said secohd control means including: 
35 means for extracting said manifest from 

said second storing! means when said user apparatus 
moves said manifest from said second storing means 
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to another scoring means; 

means for providing said manifest a 
signature by using said signature means; 

means for deleting said manifest from said 
second storing means; 

means for verifying that the signer of 
said manifest is trusted by the signer of said 
digital information by using said second 
authentication Imeans; and 

means! for storing said manifest to said 
another storing} means only when the verification 
succeeds . 



13. Th& user apparatus as claimed in claim 
9, further comprising: 

session! information generation means for 
generating session information which has uniqueness 
in said data storing system; 

said session information including a 
verification key o\f said user apparatus and a serial 
number, being stored in said user apparatus, and 
sent to a sending jbarty of said manifest; 

wherein siaid user apparatus receives said 
manifest and said session information from said 
sending party and verifies that validity of received 
session information \by using stored session 
information such that said user apparatus prevents 
reproduction of saidlmanif est . 



35 



14, An issuet apparatus for issuing 
digital information in \a data storing system for 
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storing digital information which has a value, said 
issuer apparatus comprising: 

accredited information generation means 
for generating accredited information which includes 
a set of information representing an accredited 
object trusted by the signer of said digital 
information ; 

signature means for providing a signature 
to said digital information and to said accredited 
information ; 

manifest gen 
said manifest; 

means for sehding said digital information 



aration means for generating 



and said accredited inf 

means for re 
which includes a verif 
apparatus and a serial 

means for sefr 
said manifest and said 
a verification key and 
issuer apparatus. 



ma 



se: 



15. A collect 
right of digital info 
system for storing digjL 
value, said collector 

means for re 
with a signature of th£ 
information with said 
apparatus ; 

means for gen 
which has uniqueness 
sending said session ir 
apparatus ; 



ormation to a user apparatus; 
eiving session information 
cation key of said user 
number; and 

ding information including 
session information by using 
a signature function of said 



or apparatus for exercising a 

tion in a data storing 
tal information which has a 
apparatus comprising : 

iving digital information 
issuer and accredited 
ignature from a user 



erating session information 

said data storing system and 
formation to said user 
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means for receiving information including 
said manifest and said session information from said 
user apparatus; and 

means for verifying that said session 
information, said manifest and said accredited 
information are valid 
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16. A data s 
digital information wh 
storing system compris 



toring system for storing 
Lch has a value, said data 
Lng: 



a user apparatus for using digital 
information ; 

an issuer apparatus for issuing digital 
information; and 

a collector apparatus for exercising a 
right of digital information; 

said user apparatus including: 
first storing means for storing and 
extracting digital information with a signature; 

second storing means for storing and 
extracting a manifest corresponding to digital 
information ; 

first authentication means for verifying 
valid; and 

1 means for storing said 

storing means only when said 
ans verifies that said 



that said manifest is 

first contro 
manifest in said secon|d 
first authentication m 
manifest is valid; 

said issuer 
accredited i 
for generating accredi 
a set of information r 
object trusted by the 
information ; 



apparatus including : 
formation generation means 
ed information which includes 
4presenting an accredited 
Signer of said digital 



v 



eration means for generating 



means for re 
which includes a verif 
apparatus and a serial 



signature means for providing a signature 
to said digital information and to said accredited 
information ; 

manifest gerje 
said manifest; 

means for sejnding said digital information 
and said accredited information to a user apparatus; 

ceiving session information 
ication key of said user 
number; and 
means for sejnding information including 
said manifest and saiq session information by using 
a verification key anc| a signature function of said 
issuer apparatus; 

said collector apparatus including 
means for receiving digital information 
with a signature of the issuer and accredited 
information with said [ signature from a user 
apparatus ; 

means for generating session information 



which has uniqueness 
sending said session 
apparatus ; 

means for r 
said manifest and sai 
user apparatus; and 

means for v 



Ln said data storing system and 
Information to said user 

[ceiving information including 
session information from said 



rifying that said session 
information, said manifest and said accredited 
information are valid, 
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A computer readable medium storing 



program code for caus: 
information which has 



Lg a computer to store digital 
value, said computer being 



used as an issuer apparatus in a data storing system, 



said computer readable medium comprising: 

program code means for generating first 

information which Is digital information with a 

signature; and 

program code means for generating second 

information, said second information being a 

manifest corresponding to said digital information 



18. A conputer readable medium storing 
program code for causing a computer to store digital 
information which lias a value, said computer being 
used as a user apparatus in a data storing system, 
said computer readable medium comprising: 

program oode means for verifying identity 
of said issuer apparatus by using said first 
information and said second information; and 

preventing reproduction of said digital 
information . 



19. The computer readable medium as 



information from sa 



comprising : 
ode means for obtaining a 
sued by a server which is 
concerning issue of digital 



claimed in claim l*i 
program oc 
verification key is 
stringently managed 
information ; 

program clode means for generating session 

Lid verification key; and 
program c 3de means for verifying validity 
of said session information 
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20. A computer readable medium storing 
program code for causing a computer to store digital 
information which has a value, said computer being 
used as a user apparatus in a data storing system, 
said computer readabtle medium comprising: 

first storing program code means for 
storing digital information with a signature in a 
first storing means and extracting said digital 



information with a si 
second stoi 



gnature; 

ing program code means for 
storing a manifest corresponding to digital 
information in a second storing means and extracting 
said manifest corresponding to digital information; 

first authentication program code means 
id manifest is valid; and 
ntication program code means 



for verifying that sa 
first authe 



for verifying that said manifest is valid 



21, The computer readable medium as 
25 claimed in claim 20, fcaid first authentication 
program code means comprising: 

program code means for determining whether 



said digital informat 

storing means is vali 
30 manifest correspondin 

in said second storincr 
program codei 

said digital informati 

manifest is stored in 
35 determining that said 

when said manifest is 

storing means. 



:.on stored in said first 
(1 by verifying that said 
<p to said information is stored 
means; and 

means for determining that 
on is valid only when said 
said second storing means and 
digital information is invalid 
not stored in said second 
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for verifying that tt 
included in accredite 
that the signer of ac 



22. The computer readable medium as 
claimed in claim 20,1 comprising: 

signature program code means for providing 
a signature to digit<il information; 

second authentication program code means 
e signer of said manifest is 
d objects and for verifying 
credited information and the 
signer of said digitajl information; 

program code means for extracting said 
manifest when said user apparatus moves said 
manifest ; 

program code means for providing a 
signature to said manifest by using said signature 
program code means ; 

program code means for deleting said 
manifest from said second storing means; 

program code means for verifying that the 
signer of said manifest is trusted by the signer of 



said digital informat 



ion by using said second 



25 authentication program code means; and 



program code 
manifest only when th 



23 . A compu 
program code for caus 
information which has 
used as an issuer app^rat 
said computer readabl 

accredited 



means for moving said 
verification succeeds . 



er readable medium storing 
ng a computer to store digital 
a value, said computer being 

us in a data storing system, 
medium comprising : 
nformation generation program 
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which includes a set 
accredited object tru 
digital information ; 

signature p 
a signature to said d 
accredited inf ormatio 



t. 

itin 



code means for generating accredited information 



of information representing 
s;ted by the signer of said 

::ogram code means for providing 
Igital information and to said 
i; 

manifest generation program code means for 
generating said manifest; 

program code means for sending said 
digital information a|nd said accredited information 
to a user apparatus; 

program cocje means for receiving session 
ludes a verification key of 
And a serial number; and 



information which inc: 
said user apparatus 



program code means for sending information 



including said manif 
by using a verif icat 



of said issuer apparatus 



program code for caus 
information which ha|s 
used as a collector 



st and said session information 
on key and a signature function 



24. A computer readable medium storing 



ing a computer to store digital 
a value, said computer being 
apparatus in a data storing 
system, said computejr readable medium comprising: 

program ccide means for receiving digital 
information with a slignature of the issuer and 
accredited information with said signature from a 
user apparatus; 

program cojde means for generating session 
information which has uniqueness in said data 
storing system and sending said session information 
to said user apparatus; 

program cocae means for receiving 
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information including said manifest and said session 
information from said user apparatus; and 

program code means for verifying that said 
session informations said manifest and said 
accredited information are valid. 



25. An original data circulation method in 
an original data circulation system for storing or 



circulating original. 



information, said nu^thod comprising 



a sending 
apparatus , original:, 
information includin 



a first au 
that said originally 
source apparatus is 



data which is digital 



step of sending, by a first 
ty information, said originality 
tg first information which 
corresponds to an apparatus and second information 
which is data or information corresponding to the 
data; and 

an identifying step of identifying, by a 
second apparatus, a source apparatus of said 
originality information ; 



thentication step of determining 

information is valid when said 
authenticated ; and 



a second authentication step of 
determining that said originality information is 
valid only when said Isource apparatus and an 
apparatus corresponding to said first information of 
said originality information are the same. 



35 26. The original data circulation method 

as claimed in claim 25 1 said method further 
comprising : 
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a step of concealing, by said first 
apparatus, a private key; and 

a step of storing or obtaining, by said 

value of said second 
apparatus which hash value is generated by applying 
a unidirectional function to a public key 
corresponding to one or a plurality of private keys; 

said first authentication step including: 
a step of authenticating said first 
apparatus by verifying that said first apparatus has 
a private key corresponding to said hash value. 
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27. The original data circulation method 
as claimed in claim 2I>, wherein said sending step 
includes a step of sehding a third party certificate 
to said second apparatus , said third party 
certificate being a certificate representing that 
said first apparatus is authenticated by one or a 
plurality of third perties, and said third party 
certificate corresponding to a certifier of a third 
party; J 

said method further including: 
a step of storing or obtaining, by said 
second apparatus, thlird party information 



corresponding to on 
parties ; 

said first: 
a step of 



or a plurality of third 



authentication step including: 
authenticating said first 
apparatus by verifying that said first apparatus is 
an object to be authenticated in said third party 
certificate and that a certifier of said third party 
certificate is included in third parties in said 
third party information. 
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28. The original data circulation method 



as claimed in claim 27 
comprising a step of s 



said method further 
toring or obtaining, by said 



apparatus by verifying 
an object to be auther 
certificate and that c. 



third party accredite 
parties corresponding 
being extracted from 
information . 



second apparatus, third party accredited information 
corresponding to said :irst information and one or a 
plurality of third parties; 
10 said first authentication step including: 

a step of authenticating said first 

that said first apparatus is 
ticated in said third party 
certifier of said third party 



15 certificate is included in third parties in said 



information, said third 
to said first information and 
said third party accredited 



29. The original data circulation method 
as claimed in claim 7 1 , said method further 
comprising a step of storing or obtaining, said 
second apparatus, third party accredited information 
corresponding to said first information and one or a 
plurality of third parties; 

said first authentication step including: 
a step of authenticating said first 
apparatus by verifying that a certifier of said 
third party certificate is included in third parties 
extracted from said i:hird party accredited 
information, said th:.rd parties corresponding to 
said first information and said second information. 
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30. The original data circulation method 
as claimed in claim 25, \ said method further 
including : 

a step of concealing, by said first 
apparatus, a private key; and 

a step of senc.ing a public key certificate 
and a signature by a private key, said public key 
certificate being a public key of said private key 
to which a signature by a third party which trusts 
said first apparatus is provided; 

a step of identifying, by said second 
apparatus, the public key of said third party by 
verifying said public key certificate; and 

a step of storing or obtaining one or a 
plurality of hash values ; 

said first authentication step including: 

a step of authenticating said first 
apparatus by verifying that said signature by using 
said public key included in said public key 
certificate and by verifying that information 
generated by applying a unidirectional function to 
said public key of said third party is included in 
said hash values. 



31. The origl 
as claimed in claim 2 5 , 
including a step of stor 
second apparatus, user 



nal data circulation method 
said method further 
ing or obtaining, by said 
cere di ted information 



35 corresponding to said fitrst information and one or a 



plurality of third parti 
said first aut 



3S ; 

lentication step including 
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a step of authenticating said first 
apparatus by verifying that said source apparatus is 
included in information corresponding to said first 
apparatus extracted from said first information by 
using said user accredited information. 



32. The original data circulation method 
as claimed in claim 2 5, said method further 

toring or obtaining, by said 
ipr accredited information 
or a plurality of said first 
first information and said 



including a step of s 
second apparatus , use 
corresponding to one 
apparatuses from said 
second information ; 

said first 
a step of a 
apparatus by verifyin 
included in informati 
extracted from said u 
said information corr 
information and secon 



authentication step including: 
uthenticating said first 
g that said source apparatus is 
on on said first apparatuses 
ser accredited information, 
esponding to said first 
d information. 



33 . An oric 
for storing or circu 
digital information , 

a first app 
means for sending ori 
originality inf ormat 
which corresponds to 
information which is 
corresponding to the 

a second 



inal data circulation system 
Jjating original data which is 
said system comprising: 
aratus which includes sending 
ginality information, said 
ijon including first information 
an apparatus and second 
data or information 
data; and 
aratus which includes : 
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identifying 
apparatus of said orig 



leans for identifying a source 
finality information ; 
a first authentication means for 
determining that said originally information is 
valid when said source apparatus is authenticated; 
and 

a second authentication means for 
determining said originality information is valid 
only when said source apparatus and an apparatus 
corresponding to said [first information of said 
originality information are the same. 
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34. The ora] 
as claimed in claim 33 
further includes means 

said second 
means for storing or c 
second apparatus whict 
applying a unidirectic 



ginal data circulation system 
wherein said first apparatus 
for concealing a private key; 
apparatus further including 
btaining a hash value of said 

hash value is generated by 
nal function to a public key 
corresponding to one cjr a plurality of private keys; 
and 

said first authentication means of said 
second apparatus authenticating said first apparatus 
by verifying that said first apparatus has a private 
key corresponding to said hash value 



35. The original data circulation system 
as claimed in claim 33 i wherein said sending means 
includes means for sending a third party certificate 
to said second apparatus , said third party 
certificate being a certificate representing that 
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said first apparatus is 
plurality of third parti 



authenticated by one or a 
es, and said third party 
certificate corresponding to a certifier of a third 
party; 

said second apparatus including means for 
storing or obtaining third party information 
corresponding to one Of a plurality of third 
parties; and 

said first Authentication means 
authenticating said first apparatus by verifying 
that said first apparatus is an object to be 
authenticated in said/ third party certificate and 
that a certifier of said third party certificate is 
included in third parties in said third party 
information . 
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36. The original data circulation system 
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as claimed in claim 
apparatus includes 



35, wherein said second 
neans for storing or obtaining 
third party accredited information corresponding to 
said first information and one or a plurality of 
third parties; 

said firs t authentication means 
authenticating saicL first apparatus by verifying 
that said first apparatus is an object to be 
authenticated in said third party certificate and 
that a certifier o:: said third party certificate is 
included in third parties in said third party 
accredited information, said third parties 
corresponding to slid first information and being 
extracted from saip. third party accredited 
information . 
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37. The original data circulation system 
as claimed in claim 35 , wherein said second 
apparatus includes means for storing or obtaining 
third party accredited (information corresponding to 
said first information land one or a plurality of 
third parties; J 

said first authentication means 



authenticating said fi 
that a certifier of sa 
included in third part 



corresponding to said 
second information . 



::st apparatus by verifying 
Id third party certificate is 
ties extracted from said third 



party accredited information, said third parties 



first information and said 



and a signature by a 
certificate being a 
to which a signature 
said first apparatus 
said secon 
means for 



jinal data circulation system 
wherein said first apparatus 



38. The ori< 
as claimed in claim 3 
includes : 

means for concealing a private key; and 
means for sending a public key certificate 
private key, said public key 
public key of said private key 
by a third party which trusts 
is provided; 
ifi apparatus including: 
Identifying the public key of 
said third party by verifying said public key 
certificate; and 

means for storing or obtaining one or a 
plurality of hash values; and 

said first authentication means 
authenticating said first apparatus by verifying 
that said signature by using said public key 
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included in said public key certificate and by 
verifying that information / generated by applying a 
unidirectional function to/ said public key of said 
third party is included in said hash values 



39. The original data circulation system 
10 as claimed in claim 33/ wherein said second 

apparatus includes means for storing or obtaining 
user accredited information corresponding to said 
first information and/ one or a plurality of third 
parties ; 

15 said first/ authentication means 

authenticating said/first apparatus by verifying 
that said source apparatus is included in 
information corresponding to said first apparatus 
extracted from sain first information by using said 

20 user accredited information. 



□ 



25 40. The original data circulation system 

as claimed in c/laim 33, wherein said second 
apparatus includes means for storing or obtaining 
user accreditee! information corresponding to one or 
a plurality off said first apparatuses from said 

30 first information and said second information; 

said first authentication means 
authenticating said first apparatus by verifying 
that said source apparatus is included in 
information Jon said first apparatuses extracted from 

35 said user accredited information, said information 
corresponding to said first information and second 
information/ 
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41. An iss 
data circulation syst 
original data which i 
issuer apparatus comp 

originality 
for generating origin 
includes first inform^t 
issuer apparatus and 
corresponding to data 
to the data; and 

originality 
sending said originalfL 



r apparatus in an original 

for storing or circulating 
3 digital information, said 
::ising : 

information generation means 
£lity information which 

ion corresponding to said 
second information 
or information corresponding 



information sending means for 
ty information. 



42. The issuer apparatus as claimed in 
claim 41, comprising: 

means for concealing a private key; and 
means for cfenerating a hash value of said 
issuer apparatus as said first information, said 
hash value is generated from a public key of said 
private key by applying a unidirectional function 



43. The i£ 
claim 41, comprising 
second information by 
function to said data 



uer apparatus as claimed in 
means for generating said 
applying an unidirectional 



44. The issuer apparatus as claimed in 
claim 43, wherein said second information is an 
identifier which identifies contents in a network. 



45. A use:: apparatus in an original data 
circulation system J:or storing or circulating 
original data which is digital information,, said 
user apparatus comprising: 

originality information sending means for 
sending originality information which includes first 
information corresponding an apparatus and second 
information corresponding to data or information 

data; 

ifcj means for identifying a source 
:{i_ginality information which is 
is ; 

authentication means for determining that 
said originality information is valid when said 
source apparatus is authenticated or when said 
apparatus corresponding to said first information 
and said source apparatus is the same; and 

storing mealns for storing said originality 
information when said authentication means 
determines that said (originality information is 
valid. 



corresponding to the 
ident if yin 
apparatus of said or 
sent from an apparat 



46. The user apparatus as claimed in claim 
45, comprising means for deleting said originality 
information when said luser apparatus sends said 
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originality information. 
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47. A collector apparatus in an original 
data circulation stystem for storing or circulating 
original data which is digital information, said 
collector apparatus comprising: 

identifying means for identifying a source 
apparatus of originality information; 

authentication means for authenticating 



said source appara 
data pro 
process correspond 
corresponding to s 



Ltus; and 

>oessing means for performing a 
ling to said data or data 
»cLid second information when said 
authentication means determines that said 
originality informeition which is sent to said 
collector apparatus is valid. 



48. The 
claim 47, said col 
comprising means f 
information ; 

said dat 



collector apparatus as claimed in 

Lector apparatus further 

or storing or obtaining issuer 



:a processing means performing a 
process corresponding to said data or data 
corresponding to said second information when said 
authentication means determines that said 
originality information which is sent to said 
collector apparatus is valid and when said issuer 
apparatus corresponding to said first information is 



included in said i 



ssuer information 
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ginal data circulation system 
lating original data which is 
said original data circulation 



49 . An orik 
for storing or circu! 
5 digital information, 
system comprising : 

an issuer lapparatus which includes means 
for generating originality information and sending 
said originality information, said originality 
10 information includiing first information 

corresponding to said issuer apparatus and second 
information corresponding to data; 

a user apparatus which includes means for 
verifying validity] of a source apparatus of said 
15 originality information and means for storing said 
originality information when said validity is 
verified; and 

a collefctor apparatus which includes means 
for verifying valiidity of an source apparatus of 
20 said originality / information and data processing 
means for processing data corresponding to said 
second information when said validity is verified. 
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50. Mi original data circulation system 
for storing or /circulating original data which is 
digital information, said original data circulation 
30 system comprising: 

an issuer apparatus including: 
first originality information generation 
means for generating originality information which 
includes first information corresponding to said 
35 issuer apparatus and second information 

corresponding! to data or information corresponding 
to the data; land 
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first origin 
means for sending said 
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lity information sending 
originality information ; 
a user apparatus including: 
first originality information sending 
means for sending originality information which 
includes first information corresponding to an 
apparatus and second information corresponding to 
data or information corresponding to the data; 

first identifying means for identifying a 
source apparatus of said originality information 
which is sent from an apparatus; 

first authentication means for determining 
that said originality Information is valid when said 



source apparatus is authenticated or when said 
apparatus corresponding to said first information 
and said source apparatus is the same; and 

storing means for storing said originality 
first authentication means 
riginality information is 



information when said 
determines that said 
valid; and 

a collector 



° 



source 



apparatus including : 
second identifying means for identifying a 
apparatus of originality information; 
second authentication means for 



authenticating said s 
data proces 
process corresponding 
corresponding to said 
second authentication 
originality inf ormatl 
collector apparatus 1 



ource apparatus ; and 
sing means for performing a 
to said data or data 
second information when said 
means determines that said 
on which is sent to said 
s valid. 



51. The orl 
as claimed in claim 4 



ginal data circulation system 
9, said collector apparatus 
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further comprising means for sending said 
originality information sent from said user 
apparatus to said issuer apparatus; 

said issuer apparatus further comprising: 

means for verifying that said originality 
information is generated by said issuer apparatus; 

means for verifying that said originality 
information is sent y±a a valid route; 

means for Verifying that said data 
corresponding to said second information has been 
processed by said data processing means; and 

means for providing a value according to 
said data to said collector apparatus . 



52. The or£L 
as claimed in claim 
further comprising m 
of said data as count 
originality inf ormat 

said user 
means for verifying 

said colle 
comprising means for 
information ; 

wherein sabL 
data said usable numb 



ginal data circulation system 
9, said issuer apparatus 
ans for adding a usable number 

information to said 
on ; 

apparatus further comprising 
aid count information; 
tor apparatus further 
verifying said count 



53. The or 
as claimed in claim 
data circulation sys 
which has uniqueness 



d user apparatus can use said 
er of times . 



ginal data circulation system 
9, wherein an apparatus in said 
em sends session information 
in said data circulation system 
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sends said originality 



when said apparatus 
information ; 

an apparatlus of the sending side which 
sends said originality information stores said 
originality information and said session information 



in said apparatus of 
an apparat 



the sending side; 
us of the receiving side sends 
said session information to said apparatus of the 
sending side when receiving said originality 
information; and 

said apparatus of the sending side deletes 
said originality information and said session 
information which a^re stored in said apparatus of 
the sending side. 



54. The o 
as claimed in claim 
comprising means fo 
information . 



iginal data circulation system 
49, said user apparatus further 
generating said originality 



55. A computer readable medium storing 



program code for cau 
data circulation sys; 
original data which 



ising a computer in an original 
item to store or circulate 
is digital information, said 
computer readable meidium comprising: 

first procram code means which is loaded 
in a first apparatus , first program code means 
comprising sending program code means for sending 
originality information, said originality 
information including first information which 



corresponds to an apparatus and second information 



10 



15 
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which is data or informe tion corresponding to the 
data; and 

a second progrjam code means which is 
loaded in a second apparatus, said second program 
code means comprising: j 

identifying p/rogram code means for 
identifying a source apparatus of said originality 
information; I 

first authentication program code means 
for determining that said originally information is 
valid when said source' apparatus is authenticated; 
and I 

second authentication program code means 



for determining that 
valid only when said 



said originality information is 
source apparatus and an 
apparatus corresponding to said first information of 
said originality information are the same. 
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56. The computer readable medium as 
claimed in claim 55, said first program code means 
further comprising pjrogram code means for concealing 

25 a private key; 

said secorid program code means further 
comprising program qode means for storing or 
obtaining a hash value of said second apparatus 
which hash value is generated by applying a 

30 unidirectional function to a public key 

corresponding to one or a plurality of private keys ; 

said first authentication program code 
means including program code means for 
authenticating said first apparatus by verifying 

35 that said first apparatus has a private key 
corresponding to said hash value. 
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57. The computer readable medium as 
claimed in claim 55 , said sending program code means 
including : 

program code means for sending a third 
party certificate to said second apparatus, said 
third party certificate being a certificate 



representing that sai 
authenticated by one 
and said third party 
certifier of a third 



ci first apparatus is 
or a plurality of third parties 
certificate corresponding to a 
arty; 



said second! program code means further 



including program co 
obtaining third part} 
one or a plurality oi 
said first 
means including pro 
authenticating sai 



e means for storing or 
information corresponding to 
third parties; and 
authentication program code 
code means for 

apparatus by verifying 



ogram c 
d first 



that said first apparatus is an object to be 
authenticated in said third party certificate and 

said third party certificate is 
included in third pajrties in said third party 
information , 



claimed in claim 57 
including program co 



plurality of third jo 
said first 



58 . The computer readable medium as 



said second program code means 
de means for storing or 
obtaining third partly accredited information 
corresponding to sa^d first information and one or a 

arties ; 

authentication program code 



means including program code means for 
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authenticating said firjst apparatus by verifying 
that said first apparatus is an object to be 
authenticated in said third party certificate and 
that a certifier of sap_d third party certificate is 
included in third parties in said third party 



party accredited 



accredited inf ormatiorjj , said third parties 
corresponding to said (first information and being 
extracted from said t 
information . 



If ir 
hird 



59. The coirputer readable medium as 



15 claimed in claim 57, 



obtaining third party 
corresponding to saicL 



said second program code means 



including program coc.e means for storing or 



accredited information 

first information and one or a 



plurality of third pcLrties; 

said first authentication program code 
means including program code means for 
authenticating said Jfirst apparatus by verifying 
that a certifier of said third party certificate is 
included in third pa::ties extracted from said third 
party accredited information, said third parties 
corresponding to saip first information and said 
second information . 



er readable medium as 
said first program code means 



6 0 . The cofnput 
claimed in claim 55, 
including : 

program co^e means for concealing a 
private key; and 

program code means for sending a public 



93- 



.1 £3. 



I 5 ^ 



10 



15 



key certificate and a signature by a private key, 
said public key certificate being a public key of 
said private key to which a signature by a third 
party which trusts sap first apparatus is provided; 

said secon(|/ program code means including: 

program code means for identifying the 
public key of said third party by verifying said 
public key certificate; and 

program code means for storing or 
obtaining one or el plurality of hash values; 

said first authentication program code 
means including program code means for 
authenticating said first apparatus by verifying 
said signature by using said public key included in 
said public key/ certificate and by verifying that 
information generated by applying a unidirectional 
function to said public key of said third party is 
included in said hash values. 
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61. The computer readable medium as 
claimed in claim 55, said second program code means 
25 including program code means for storing or 

obtaining user accredited information corresponding 
to said fiirst information and one or a plurality of 
third parties; 

said first authentication program code 
30 means indluding program code means authenticating 
said first apparatus by verifying that said source 
apparatus is included in information corresponding 
to said /first apparatus extracted from said first 
information by using said user accredited 
35 inf ormajcion . 
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62. The computer readable medium as 
claimed in claim 55 , said second program code means 
including program code means for storing or 
obtaining user accredited information corresponding 
to one or a plurality of said first apparatuses from 
said first information / and said second information; 

said first authentication program code 
means including means tor authenticating said first 
apparatus by verifying that said source apparatus is 
included in information on said first apparatuses 
extracted from said user accredited information, 
said information corresponding to said first 
information and second information. 



original data which 
computer being used 



63. A computer readable medium storing 
program code for causing a computer in an original 
data circulation sysjtem to store or circulate 

is digital information, said 
as an issuer apparatus, said 
computer readable medium comprising: 

originality information generation program 
code means for generating originality information 

information corresponding to 
said issuer apparatus and second information 
corresponding to dajta or information corresponding 
to the data; and 

originality information sending program 
code means for sending said originality information 
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64. The c 
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mputer readable medium as 



claimed in claim 63, further comprising: 

program code means for concealing a 
private key; and 

program cede means for generating a hash 
value of said issuer apparatus as said first 
information, said hash value is generated from a 
public key of said private key by applying a 
unidirectional function . 



65. The 
claimed in claim 63 
means for generatin 
applying an unidirelct 



computer readable medium as 

further comprising program code 
g said second information by 
ional function to said data. 



66. The 
claimed in claim 65 
means for using an 
contents in a netwo 



qomputer readable medium as 

further comprising program code 
identifier which identifies 
rk as said second information. 



67. A computer readable medium storing 
program code for causing a computer in an original 
data circulation system to store or circulate 
original data which lis digital information, said 
computer being used las a user apparatus, said 
computer readable meldium comprising: 

originality information sending program 
code means for sending originality information which 



includes first infornation corresponding to an 



apparatus and second 
data or information 



identifying a source 
information which is 



information corresponding to 
Corresponding to the data; 



identifying program code means for 



apparatus of said originality 
sent from an apparatus; 
authentication program code means for 
determining that said originality information is 
valid when said source apparatus is authenticated or 
when said apparatus! corresponding to said first 
information and saip source apparatus is the same; 
and I 

storing program code means for storing 
said originality ir formation when said 
authentication program code means determines that 



said originality in 



68. The 
claimed in claim 6 
means for deleting 
said user apparatujs 
information . 



formation is valid, 



omputer readable medium as 
, further comprising program code 
said originality information when 
sends said originality 



69. A coAiputer readable medium storing 
program code for causing a computer in an original 
data circulation system to store or circulate 
original data which is digital information, said 
computer being usee as a collector apparatus, said 
computer readable nedium comprising: 

identifying program code means for 
identifying a source apparatus of originality 
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inf ormation ; 

authenticaticfn program code means for 
authenticating said source apparatus; and 

data processing . program code means for 
performing a process corresponding to said data or 
data corresponding to jsaid second information when 
said authentication pi/ogram code means determines 
that said originality /information which is sent to 
said collector apparatus is valid. 
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70. The cofnputer readable medium as 
15 claimed in claim 69 J further comprising: 

program code means for storing or 
obtaining issuer information; 

said data/ processing program code means 
including program dode means for performing a 
20 process corresponding to said data or data 

corresponding to said second information when said 
authentication program code means determines that 
said originality ijnf ormation which is sent to said 
collector apparatus is valid and when said issuer 
25 apparatus corresponding to said first information is 
included in said Issuer information. 



30 



35 



71. A computer readable medium storing 



program code for 
data circulation 
original data wh 
computer readabl 
issuer 



causing computers in an original 
system to store or circulate 

Lch is digital information, said 

s medium comprising: 
program code means which is loaded 



in an issuer apparatus, said issuer program code 
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means including: / 

first originality information generation 
program code means for generating originality 
information which includes first information 
corresponding to said/ issuer apparatus and second 
information corresponding to data or information 
corresponding to the Idata; and 

first originality information sending 
program code means for sending said originality 
information; j 

user program code means which is loaded in 
a user apparatus, sajid user program code means 
including: j 

first originality information sending 
program code means for sending originality 
information which includes first information 
corresponding to aiJ apparatus and second information 
corresponding to d4ta or information corresponding 
to the data; 

first identifying program code means for 
identifying a source apparatus of said originality 
information which [is sent from an apparatus; 

first authentication program code means 
for determining that said originality information is 
valid when said source apparatus is authenticated or 
when said apparatus corresponding to said first 
information and s^id source apparatus are the same; 
and 

storing) program code means for storing 
said originality [information when said first 
authentication prjogram code means determines that 
said originality (information is valid; and 

collectjor program code means which is 
loaded in a collector apparatus, said collector 
program code means including: 

second identifying program code means for 
identifying a soiree apparatus of originality 




■99- 



10 




information ; 

second authentication program code means 
for authenticating said source apparatus; and 

i^a processing program code means for 
performing a\ process, corresponding to said data or 
data corresponding to said second information when 
said second aiXtlrentication program code means 
determines that, sVid originality information which 
is sent to said\cdllector apparatus is valid. 
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